DOCKET NUMBER: AUS990889US1 . oi^ 
November 22, 1999 



U 



THE ASSISTANT COMMISSIONER OF PATENTS 
Washington, D.C. 20231 

Sir: 

Transmitted herewith for filing is the Patent Application of: 
Inventor: Viktors Berstis et al. 

For: METHOD AND SYSTEM FOR VERIFYING CONTROL ACCESSES BETWEEN A DEVICE ON A NON-PROPRIETARY 
BUS AND A DEVICE ON A PROPRIETARY BUS 

Enclosed are: 

X Patent Specification and Declaration 
X _^heets of drav^ing(s). 

X An assignment of the invention to International Business Machines Corporation (includes Recordation Form Cover Sheet). 
A certified copy of a application. 

Information Disclosure Statement, PTO 1449 and copies of references. 



The filincr fee 


has been calculated as shovm 


below: 




For 


Number Number 
Filed Extra 


Rate 


Fee 


Basic Fee 






$760 


Total Claims 


6 - 20 


X 18 




Indep , Claims 


3 - 3 


X 78 = 




MULTIPLE 


DEPENDENT CLAIM PRESENTED 


X 260 = 





TOTAL 



$760.00 



J(_. Please charge IBM Corporation Deposit Account No. 09-0447 in the amount of $ 760.00 . A duplicate copy of this sheet is 
enclosed. 

X The Commissioner is hereby authorized to charge payment of the following fees associated with this communication or 
credit any overpayment to IBM Corporation Deposit Account 09-0447 . A duplicate copy of this sheet is enclosed, 

X Any additional filing fees required under 37 CFR §1.16. 

X Any patent application processing fees under 37 CFR §1.17. 



CERTIFICATE OF MAO^ING BY "EXPRESS MAIL" UNDER 37 CFR § 1.10 

"Express Mail" mailing label number EL453464823US 

Date of Mailing November 22, 1999 

I herdjy certify that the documents indicated beloware being deposited with 
the United States Postal Service under 37 CFR 1 10 on the date indicated above and are 
addressed to Box Patent Applications, Assistant Commissioner of Patents, Washington, 
D C 2023 1 and mailed on the above Date of Mailing with the above 'Express Mail" 
mailing label number 



(name of person mailing papel> 



SIGNATURE of person mailing paper or fee 



Respectfully submitted. 



By 

Antony P. Ng 
Registration No. 43,427 

FELSMAN, BRADLEY, VADEN, GUNTER & 
DILLON, LLP 

Suite 350 Lakewood on the Park 
7600B North Capital of Texas Highway 
Austin, Texas 78731 
Telephone (512) 343-6116 



AUS990889US1 



METHOD AND SYSTEM FOR VERIFYING CONTROL ACCESSES BETWEEN A 
DEVICE ON A NON- PROPRIETARY BUS AND A DEVICE ON 
A PROPRIETARY BUS 

BACKGROUND OF THE INVENTION 
!♦ Technical Field 

The present invention relates to a method and 
system for data processing in general, and in particular to a 
method and system for providing data communications between 
two independent buses within a data processing system. Still 
more particularly, the present invention relates to a method 
and system for verifying control accesses between a device on 
a non- proprietary bus and a device on a proprietary bus 
within a data processing system. 

2 . Description of the Prior Art 

A proprietary bus is a bus that is intended for the 
private use of an original equipment manufacturer (OEM) , and 
access to a proprietary bus is generally restricted in order 
to limit any liability from actions that may be caused by 
inappropriate commands being sent on the proprietary bus. 
One example of a proprietary bus is the Controller Area 
Network (CAN) bus. The CAN bus is an ISO-defined serial 
communications bus that was originally developed during the 
late 1980 's for the automotive industry. The basic design 
specification of the CAN bus calls for a high bit-rate, a 
high immunity to electrical interference, and an ability to 
detect any errors produced. Not surprisingly, the CAN bus 
rapidly came to be widely used throughout the automotive and 
aerospace industries over the years, mainly due to the above- 
mentioned advantageous features. 



AUS990889US1 



-2- 



The CAN communications protocol, which conforms 
with the layered configuration defined by the Open Systems 
Interconnection (OSI) model, describes the method by which 
data are passed between devices coupled to the CAN bus. The 
CAN architecture defines the lowest two layers as a data- link 
layer and a physical layer. The application layers are 
linked to the physical medium by the layers of various 
emerging protocols, which may be specific to a particular 
industry or propriety schemes defined by individual CAN 
users . 

The present disclosure describes a method and 
system for verifying control accesses from a device on a non- 
proprietary bus to a device on a proprietary bus, such as a 
CAN bus. 
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SUMMARY OF THE INVENTION 

In accordance with a preferred embodiment of the 
present invention, a gateway controller is connected between 
a proprietary bus and a non-proprietary bus, A determination 
is made as to whether or not a non-proprietary device is 
registered to more than one gateway controller. In response 
to a determination that the non-proprietary device is 
registered to more than one gateway controller, another 
determination is made as to whether or not the non- 
proprietary device is a portable device. In response to a 
determination that the non-proprietary device is a portable 
device, another determination is made as to whether or not a 
number of acceptable duplication has been exceeded. In 
response to a determination that the number of acceptable 
duplication has been exceeded, a flag is set to indicate a 
control access violation has occurred. 

All objects, features, and advantages of the 
present invention will become apparent in the following 
detailed written description. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The invention itself, as well as a preferred mode 
of use, further objects, and advantages thereof, will best be 
understood by reference to the following detailed description 
of an illustrative embodiment when read in conjunction with 
the accompanying drawings, wherein: 

Figure 1 is a block diagram of a vehicle 
environment having two internal vehicle buses, in accordance 
with a preferred embodiment of the present invention; 

Figure 2 is a detailed block diagram of the gateway 
controller from Figure 1, in accordance with a preferred 
embodiment of the present invention; 

Figure 3 is an exemplary permitted messages bitmap 
table in accordance with a preferred embodiment of the 
present invention; and 

Figure 4 is a high-level logic flow diagram of a 
method for detecting a counterfeit device on a non- 
proprietary bus, in accordance with a preferred embodiment of 
the present invention. 
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DETAILED DESCRIPTION OP A PREFERRED EMBODIMENT 

The present invention is applicable to a variety of 
data processing systems employing at least two independent 
buses. In addition, the data processing system may be a 
stand-alone system or part of a network such as a local-area 
network (LAN) or a wide -area network (WAN) . For the purpose 
of illustration, a preferred embodiment of the present 
invention, as described below, is implemented on a vehicle 
environment employing two separate internal vehicle buses. 

Referring now to the drawings and in particular to 
Figure 1, there is depicted a block diagram of a vehicle 
environment having two separate internal vehicle buses, in 
accordance with a preferred embodiment of the present 
invention. As shown, within a vehicle environment 10, an 
original equipment manufacturer (OEM) bus 11 is coupled to a 
non-proprietary bus 12 via a gateway controller 20. OEM bus 
11, such as a CAN bus mentioned previously, is a proprietary 
bus to which various control components that are crucial to 
the operations of the vehicle are coupled. These control 
components include, for example, an engine control module 13, 
an exhaust control module 14, and a dashboard control module 
15, as shown in Figure 1. Components on OEM bus 11, such as 
control modules 13-15, can communicate with each other via 
messages which preferably take the form of commands. OEM bus 
11 is typically restricted from access by non-registered 
users. In fact, it is commonly the desire of an automobile 
manufacturer to limit accesses to OEM bus 11 only to certain 
privileged parties. This is, in part, to limit any liability 
from actions that may be caused by inappropriate commands 
communicated on OEM bus 11 . 
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Non-proprietary bus 12 is an internal vehicle bus 
to which various components that are not crucial to the 
operations of the vehicle are coupled. These non-crucial 
components include, for example, a CD/DVD player 16, a radio 
17, a navigation device 18, and a wireless communication 
device 19, as shown in Figure 1. Non-proprietary bus 12 is 
intended for general public access. An example of non- 
proprietary bus 12 is the Intelligent Transportation Systems 
(ITS) data Bus. Details regarding the ITS data bus can be 
found in SAE J2366-2 ITS Data Bus Link Layer Recommended 
Practice, August 31, 1999; SAE J2366-4 ITS Data Bus Thin 
Transport Layer Recommended Practice, August 30, 1999; and 
SAE J2366-7 ITS Data Bus Application Message Layer 
Recommended Practice, August 30, 1999, which are incorporated 
herein by reference. 

Wireless communication device 19 is a special 
device that has the ability to securely communicate with a 
remotely located server 31 by means of an airlink 32 provided 
by an appropriate wireless service such as OnStar® 
communication service offered by General Motors Corporation 
of Detroit, Michigan. In addition, there is also a secure 
communications link between wireless communication device 19 
and gateway controller 20. Thus, messages sent from wireless 
communication device 19 can be trusted by gateway controller 
20. 

In some situations, a device connected to non- 
proprietary bus 12 may want to communicate with a device on 
OEM bus 11. For example, navigation device 18 may want to 
send vehicle direction information to dashboard control 
module 15 such that the vehicle direction information can be 
displayed on a dashboard for the driver of the vehicle. In 
accordance with a preferred embodiment of the present 
invention, a device connected to non-proprietary bus 12 has 
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to follow certain registration protocols and communication 
protocols in order to communicate to a device on OEM bus 11 
via gateway controller 20, 

With reference now to Figure 2, there is depicted a 
detailed block diagram of gateway controller 20, in 
accordance with a preferred embodiment of the present 
invention. Gateway controller 20 is preferably a 
microcontroller that permits certain messages to be sent 
between a device on non-proprietary bus 12 and a device on 
OEM bus 11. As shown, gateway controller 20 includes a 
central processing unit 21, a random access memory (RAM) 22, 
a read only memory (ROM) 23, an OEM bus module 24, and a non- 
proprietary bus module 25. A flash memory 26 may also be 
externally coupled to gateway controller 20 for additional 
storage space, OEM bus 11 is coupled to gateway controller 
20 via an OEM bus transceiver 27, and non-proprietary bus 12 
is coupled to gateway controller 20 via a non-proprietary bus 
transceiver 28, As mentioned previously, one function of 
gateway controller 20 is to limit any access to OEM bus 11 
only to certain licensed devices on non-proprietary bus 12, 
and only for approved messages and/or commands. Access is 
controlled via a secure registration process described here 
below, 

A. Device manufacturing process 

An agreement is initially made between the vehicle 
manufacturer and a device manufacturer, such as a navigation 
device manufacturer, intended to license the access of OEM 
bus 11. The agreement includes a set of messages, preferably 
in the form of commands, to be sent and received by a device 
expected to be installed on non-proprietary bus 12. For a 
batch of devices to be manufactured, the device manufacturer 
supplies to the vehicle manufacturer a group of information 
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packets. Each information packet corresponds to a separate 
device, and each information packet comprises a device vendor 
identification, a device identification, a device serial 
number, and a manufacturing date. After receiving the 
information packets from the device manufacturer, the vehicle 
manufacturer then computes an unique identification packet 
(ID packet) for each device by adding a random number to an 
information packet associated with the device. The computed 
batch of ID packets are subsequently sent back to the device 
manufacturer. During the manufacturing process, each device 
is programmed with an unique ID packet. In addition, the 
computed batch of ID packets are also encrypted via a one-way 
encryption algorithm by the vehicle manufacturer. After 
verifying that each of the encrypted ID packets is globally 
unique, the vehicle manufacturer stores the encrypted ID 
packets are in server 31. 

B. Device registration process 

A device, such as a navigation device, manufactured 
by a licensed navigation device manufacturer is typically 
installed into a vehicle. However, for certain mobile 
devices, such as a portable CD player, the end user may 
install the mobile devices every time the end user uses the 
vehicle. Regardless, a device needs to registered with 
gateway controller 20 that is coupled to non-proprietary bus 
12, if the device on non-proprietary bus 12 desires to 
communicate with any device on OEM bus 11. 

Each device on non-proprietary bus 12 is requested 
to send its ID packet, the contents of which have been 
described previously. Gateway controller 20 then checks 
whether the ID packet has already been listed in a table of 
registered devices stored in its secure storage devices, such 
as ROM 23 or flash memory 26. If the ID packet is listed, 
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then the device registration is complete. Otherwise, the 
device is considered a new device that needs to be 
registered. 

The registration process begins with gateway 
controller 20 sending the ID packet of the device and the ID 
packet of gateway controller 20 to wireless communication 
device 19. Gateway controller 20 then requests wireless 
communication device 19 to register the device. Wireless 
communication device 19 in turn communicates with remote 
server 31 (e.g., the vehicle manufacturer's server) and 
securely transmits the above-mentioned two ID packets to 
remote server 31. At remote server 31, the two ID packets 
are verified to determine if they are part of the known set 
of assigned ID packets. The database entry for gateway 
controller 20 in remote server 31 is then updated to indicate 
a registration of the device, if this is the first time 
registration for the device. Specifically, the server 
database entry for the device is updated to indicate that the 
device is registered to gateway controller 20. 

Next, remote server 31 returns a confirmation of 
registration to wireless communication device 19 along with a 
bitmap indicating gateway controller 20 messages that the 
device is authorized to send and receive messages to and from 
OEM bus 11. Furthermore, if this was the first time 
registration for the device, an appropriate license fee can 
be collected from the device manufacturer, via an electronic 
method or otherwise. 

At this point, wireless communication device 19 can 
securely send gateway controller 20 a device registration 
confirmation along with a permitted messages bitmap 
indicating the messages the device is allowed to use. If the 
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device was not successfully registered, a permitted messages 
bitmap filled with zeros is provided. Additional message can 
be added to indicate the reason why the device was not 
registered. Gateway controller 20 places the ID packet of 
the device and the permitted messages bitmap into a permitted 
messages bitmap table preferably stored in flash memory 26. 
If the device was not registered, gateway controller 20 will 
refuse to handle any messages from the device. This is again 
accomplished by storing a zero-filled permitted messages 
bitmap for the entry of the device. 

An example of a permitted messages bitmap table is 
depicted in Figure 3, As shown, a permitted messages bitmap 
table 40 contains multiple entries of ID packets and 
permitted messages bitmaps. Each ID packet entry is 
associated with at least one permitted message. If a device 
was not successfully registered, a zero-filled permitted 
messages bitmap is provided, as depicted in entry 41 for ID 
packet 41. 

C. Device de-registration process 

At some point, a device may be temporarily or 
permanently removed from the vehicle. The device then needs 
to be de-registered with gateway controller 20. 

If a device listed in flash memory 26 becomes 
defective or has been removed from the vehicle, then the 
device de-registration becomes applicable. If the device is 
not a portable device, then its entry is simply removed from 
flash memory 26. If the device is a portable device, such as 
a removable CD player, then a time notation is made in flash 
memory 26 to indicate the device is currently not present. 
If the device has not been present for a predetermined amount 
of time (e.g., two weeks), then its entry will be removed 
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from flash memory 26. Periodically {e.g., every month) or at 
random times (e.gr., when the link to wireless communication 
device 19 is active) , gateway controller 20 can communicate 
to remote server 31 to verify the list of currently 
registered devices maintained by gateway controller 20, 

Similarly, counterfeit devices that were not 
registered through the proper manner as described above can 
be detected by periodically checking the information stored 
in remote server 31, With reference now to Figure 4, there 
is illustrated a high-level logic flow diagram of a method 
for detecting a counterfeit device on a non-proprietary bus, 
in accordance with a preferred embodiment of the present 
invention. Starting at block 50, a determination is made as 
to whether or not a non-proprietary device is registered to 
more than one gateway controller, as shown in block 51. If 
the non-proprietary device is registered to more than one 
gateway controller, another determination is made as to 
whether the non-proprietary device is a portable or 
"transient" device, as depicted in block 52. A portable or 
"transient" device is expected to be moved from vehicle to 
vehicle. If the non-proprietary device is not a portable or 
"transient" device, then a flag is set, as illustrated in 
block 54, to indicate to the vehicle manufacturer that the 
device registration has been compromised, at least for one 
non-proprietary device. Otherwise, if the non-proprietary 
device is a portable or "transient" device, another 
determination is made as to whether the number of duplication 
exceeds a predetermined number of acceptable duplication, as 
shown in block 53. If the number of duplication exceeds a 
predetermined number of acceptable duplication, such as 
three, a flag is set, as illustrated in block 54, to indicate 
to the vehicle manufacturer that there may be a cloning of a 
registered non- proprietary device by an unauthorized party. 
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and a proper investigation should be initiated. 

Although wireless communication device 19 is 
preferably installed on non-proprietary bus 12, a secure 
means of communication is established between wireless 
communication device 19 and gateway controller 20 by 
encrypting all messages between wireless communication device 
19 and gateway controller 20. A unique and relatively long 
encryption key is used for encrypting any messages to be 
communicated between wireless communication device 19 and 
gateway controller 20. Each encrypted message also includes 
a checksum as part of the encrypted message so that upon 
decryption, the integrity of the encrypted message can be 
ascertained. Thus, any other device snooping these 
communication link between wireless communication device 19 
and gateway controller 20 will not be able to "understand" 
the encrypted messages. 

Wireless communication device 19 is also provided 
with the ability to receive a new encryption key from remote 
server 31, for example, for the purpose of replacing a 
defective wireless communication device or gateway controller 
in a vehicle. There is no provision for changing the 
encryption key for a particular gateway controller during 
normal operation, short of replacing the gateway controller. 
This is because any general update procedure would 
potentially be a risk due to the fact that once an update 
procedure were compromised, all gateway controllers would be 
vulnerable. Although this potential risk can be addressed by 
having a separate update procedure algorithm for each gateway 
controller, it would be tantamount to having two encryption 
keys in one gateway controller or simply an even longer 
encryption key. 
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Remote server 31 may be comprised of several server 
machines, running appropriate server software, which permits 
a scalable and secure wireless connection with wireless 
communication device 19. Remote server 31 also stores its 
private encryption key in a tamper-proof hardware unit such 
as the 4758 cryptographic coprocessor manufactured by 
International Business Machines Corporation of Armonk, New 
York. Remote server 31 preferably contains several databases 
having various information, as follows. A first database 
indexed by the one-way encrypted ID packets of different 
gateway controllers, with each entry containing: 

i. one-way encrypted ID packets of each gateway 
controller; 

ii. public encryption keys of each gateway controller; 

iii. a list of non-proprietary bus devices currently 
registered with each gateway controller, including 
time of registration; 

iv. one-way encrypted ID packets of each associated 
wireless communication unit; and 

V. a bit indicating that a corresponding gateway 

controller ID packet is explicitly invalid due to, 
for example, improper registration. 

A second database indexed by the one-way encrypted ID packets 
of the non-proprietary bus devices, with each entry 
containing: 

i. one-way encrypted ID packets of each non- 
proprietary device; 

ii. registration limits; 

iii. a list of gateway controllers for which a non- 
proprietary bus device is registered; 

iv. a license agreement covering each non-proprietary 
bus device; and 
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V. a bit indicating that a non-proprietary bus device 
ID packet is explicitly invalid. 

A third database indexed by the one-way encrypted ID packets 
of wireless communication devices, with each entry 
containing: 

i. one-way encrypted ID packets of the wireless 
communication devices; 

ii. public encryption keys of the wireless 
communication devices; 

iii. one-way encrypted ID packets of the associated 
gateway controllers; and 

iv. a bit indicating that a wireless communication 
device ID packet is explicitly invalid. 

A fourth database indexed by license agreements, with each 
entry containing: 

i. a list of one-way encrypted ID packets of 
manufactured non-proprietary bus devices; 

ii. permission bitmaps appropriate for the non- 
proprietary bus devices; 

iii. bit indicating if the non-proprietary bus device is 
a portable device; and 

iv. expected number of concurrent registrations for a 
non-proprietary bus device. 

During message transmission between OEM bus 11 and 
non-proprietary bus 12, messages originated from a device on 
OEM bus 11 to a device on non-proprietary bus 12 preferably 
have priority over messages originated from a device on non- 
proprietary bus 12 to a device on OEM bus 11. For a message 
from a device on OEM bus 11 to a device on non-proprietary 
bus 12, gateway controller 20 determines what the messages 
type of the message is, and checks to find out if the device 
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on non-proprietary bus 12 is listed in the permitted message 
bitmap table to receive the message, according to the 
corresponding permitted message bitmap. If so, the message 
is forwarded to the device on non-proprietary bus 12 . 

On the other hand, messages originated from a 
device on non-proprietary bus 12 to a device on OEM bus 11 
have lower priority over messages originated from a device on 
OEM bus 11 and messages originated from wireless 
communication device 19. For a message from a device on non- 
proprietary bus 12 to a device on OEM bus 11, gateway 
controller 20 again determines what the messages type of the 
message is, and determines if the device on OEM bus 11 is 
listed in the permitted messages bitmap table to receive the 
message, according to the corresponding permitted message 
bitmap. If so, the message is forwarded to the device on OEM 
bus 11. 

As has been described, the present invention 
describes an improved method and system for providing control 
accesses between a device on a non-proprietary bus and a 
device on a proprietary bus within a data processing system. 

It is also important to note that although the 
present invention has been described in the context of a 
fully functional computer system, those skilled in the art 
will appreciate that the mechanisms of the present invention 
are capable of being distributed as a program product in a 
variety of forms, and that the present invention applies 
equally regardless of the particular type of signal bearing 
media utilized to actually carry out the distribution. 
Examples of signal bearing media include, without limitation, 
recordable type media such as floppy disks or CD ROMs and 
transmission type media such as analog or digital 
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communications links . 

While the invention has been particularly shown and 
described with reference to a preferred embodiment, it will 
be understood by those skilled in the art that various 
changes in form and detail may be made therein without 
departing from the spirit and scope of the invention. 
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CLAIMS 

What is claimed is : 



1 1. A method for verifying control accesses between a device 

2 on a non-proprietary bus and a device on a proprietary bus, 

3 said method comprising the steps of: 

4 in response to a determination that a non- 

5 proprietary device is registered to more than one 

6 gateway controller, determining whether or not said non- 

7 proprietary device is a portable device; 

in response to a determination that said non- 
proprietary device is a portable device, determining 
-fi) whether or not a number of acceptable duplication has 

Jii been exceeded; and 

fj^ in response to a determination that said number of 

143 acceptable duplication has been exceeded, setting a flag 

to indicate a violation of said control access. 
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2, The method according to Claim 1, wherein said method 
further includes a step of setting a flag to indicate a 
violation of said control access, in response to a 
determination that said non-proprietary device is not a 
portable device. 
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1 3 . A system capable of verifying control accesses between a 

2 device on a non-proprietary bus and a device on a proprietary 

3 bus, said system comprising: 

4 means for determining whether or not a non- 

5 proprietary device is registered to more than one 

6 gateway controller; 

7 means for determining whether or not said non- 

8 proprietary device is a portable device, in response to 

9 a determination that a non-proprietary device is 

10 registered to more than one gateway controller; 

means for determining whether or not a number of 
acceptable duplication has been exceeded, in response to 
% a determination that said non-proprietary device is not 

a portable device; and 

^^|5 means for setting a flag to indicate a violation 

IM of said control access, in response to a determination 

% that said number of acceptable duplication has been 

[m exceeded. 
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1 4 . The system according to Claim 3 , wherein said system 

2 further includes a means for setting a flag to indicate a 

3 violation of said control access, in response to a 

4 determination that said non-proprietary device is not a 

5 portable device. 
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1 5. A computer program product residing on a computer usable 

2 medium for verifying control accesses between a device on a 

3 non-proprietary bus and a device on a proprietary bus, said 

4 computer program product comprising: 

5 program code means for determining whether or not a 
5 non-proprietary device is registered to more than one 

7 gateway controller; 

8 program code means for determining whether or not 

9 said non-proprietary device is a portable device, in 
10 response to a determination that a non -proprietary 

fpL device is registered to more than one gateway 

controller; 

program code means for determining whether or not a 
[lA number of acceptable duplication has been exceeded, in 

response to a determination that said non-proprietary 
:i6 device is not a portable device; and 

program code means for setting a flag to indicate a 
violation of said control access, in response to a 
=ii9 determination that said number of acceptable duplication 

20 has been exceeded. 
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6 . The computer program product according to Claim 5 , 
wherein said computer program product further includes a 
program code means for setting a flag to indicate a violation 
of said control access, in response to a determination that 
said non-proprietary device is not a portable device. 
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ABSTRACT 

METHOD AND SYSTEM FOR VERIFYING CONTROL ACCESSES BETWEEN A 
DEVICE ON A NON- PROPRIETARY BUS AND A DEVICE ON 
A PROPRIETARY BUS 

A method for verifying control accesses between a 
device on a non-proprietary bus and a device on a proprietary 
bus is disclosed. A gateway controller is connected between 
a proprietary bus and a non-proprietary bus. A determination 
is made as to whether or not a non-proprietary device is 
registered to more than one gateway controller. In response 
to a determination that the non-proprietary device is 
registered to more than one gateway controller, another 
determination is made as to whether or not the non- 
proprietary device is a portable device. In response to a 
determination that the non-proprietary device is a portable 
device, another determination is made as to whether or not a 
number of acceptable duplication has been exceeded. In 
response to a determination that the number of acceptable 
duplication has been exceeded, a flag is set to indicate a 
control access violation has occurred. 
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the claims of this application is not disclosed in the prior United States 
application in the manner provided by the first paragraph of Title 35, United 
States Code, §112, I acknowledge the duty to disclose information material to 
the patentability of this application as defined in Title 37, Code of Federal 
Regulations, §1.56 which occurred between the filing date of the prior 
application and the national or PCT international filing date of this 
application: 



(Application Serial #) (Filing Date) (Status) 
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DOCKET NUMBER: AUS990889US1 



I hereby declare that all statements made herein of my own knowledge are true and 
that all statements made on information and belief are believed to be true; and 
further that these statements were made with the knowledge that willful false 
statements and the like so made are punishable by fine or imprisonment, or both, 
Tonder Section 1001 of Title 18 of the United States Code and that such willful 
false statements may jeopardize the validity of the application or any patent 
issued thereon, 

POWER OF ATTORNEY: As a named inventor, I hereby appoint the following attorneys 
and/or agents to prosecute this application and transact all business in the 
Patent and Trademark Office connected therewith. 

John W, Henderson, Jr., Reg. No. 26,907; Thomas E. Tyson, Reg. No. 28,543; Robert 
M. Carwell, Reg. No. 28,499; Jeffrey S. LaBaw, Reg. No. 31,633; Douglas H. 
Lefeve, Reg. No. 26,193; Casimer K. Salys, Reg. No. 28,900; David A. Mims, Jr., 
Reg, No. 32,708; Volel Emile, Reg. No. 39,969; James H. Barksdale, Jr. Reg. No. 
24,091; Anthony V. England, Reg. No. 35,129; Leslie A. Van Leeuwen, Reg. No. 
42,196; Marilyn S. Dawkins, Reg. No. 31,140; Mark E. McBurney, Reg. No. 33,114; 
Christopher A. Hughes, Reg. No. 26,914; Edward A. Pennington, Reg. No. 32,588; 
John E. Hoel, Reg. No. 26,279; Joseph C, Redmond, Jr., Reg, No. 18,753; Andrew 
J. Dillon, Reg. No. 29,634; Max Ciccarelli, Reg. No. 39,454; Daniel E. Venglarik, 
Reg. No. 39,409; Jack V. Musgrove, Reg, No. 31,986; Brian F. Russell, Reg. No. 
40,796; Steven Lin, Reg. No. 35,250; Matthew W. Baca, Reg. No. 42,277; Justin M. 
Dillon, Reg. No. 42,486; Antony P. Ng, Reg. No. 43,427; John G, Graham, Reg. No. 
19,563; Matthew S. Anderson, Reg. No. 39,093; Michael R. Barre, Reg. No. 44,023; 
Andrew Mitchell Harris, Reg. No, 42,638; Richard McCain, Reg. No, 43,785 and 
Michael Noe, Reg. No. 44,975. 

Send correspondence to: Andrew J. Dillon, FELSMAN, BRADLEY, VADEN, GUNTER & 
DILLON, LLP, Suite 350 Lakewood on the Park, 7600B North Capital of Texas 
Highway, Austin, Texas 78731, and direct all telephone calls to Andrew J. Dillon, 
(512) 343-6116. 



FULL NAME OF SOLE OR FIRST .INVENTOR: Viktors Berstis 

INVENTORS SIGNATURE: /J fJi r? ^f^^//A DATE: Mdif ^ ZZ, /t^9 

RESIDENCE: 5104 Cuesta Verde 

Austin, Texas 78746 

CITIZENSHIP: U.S.A. 

POST OFFICE ADDRESS: 5104 Cuesta Verde 

Austin, Texas 78746 



FULL NAME OF SECOND INVENTOR: George Willard Van Leeuwen 

INVENTORS SIGNATURE: DATE:_ 

RESIDENCE: 2737 59th Street NW 

Rochester, Minnesota 55901 

CITIZENSHIP: U.S.A. 

POST OFFICE ADDRESS: 2737 59th Street NW 

Rochester. Minnesota 55901 
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DOCKET NUMBER: AUS990889US1 
FULL NAME OF THIRD INVENTOR: Steven Michael Pritko 

INVENTORS SIGNATURE: DATE: 



RESIDENCE : 5 Governeurs Lane 

Endicott, New York 13760 

CITIZENSHIP : U.S.A. 

POST OFFICE ADDRESS : 5 Governeurs Lane 

Endicott, New York 13760 



FULL NAME OF FOURTH INVENTOR: Amal Ahmed Shaheen 

INVENTORS SIGNATURE: DATE: 

RESIDENCE : 68 St. Stephens School Road 
Austin, Texas 78746 

CITIZENSHIP: U.S.A. 

POST OFFICE ADDRESS: 68 St. Stephens School Road 

Austin, Texas 78746 
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DOCKET NUMBER: AUSg90889USl 
DSCUUUITIOH AKD FOHSR OF XVSOma TOR 
PATENT APPLICATION 



A3 a below named inventor* 1 hereby declare that: 

fisy residence, post office address ami citizenship are as stated below nexc 
to niy name; 

I believe i am the original , firsr and sole inventor lie only one name is 
listed below) or an original, first and joint inventor <if plural names are 
listed below) of the s^ject matter which is claimed and for which a patent is 
sought on the invention entitled 

METHOD AKD SYSTEM FOR VSRinim CONTROL ACCESSES BETWESy A DEVICE OS A «0N^ 
PROPRIETARY BtTS AND A D EVICE ON A PROPRIgrftRI^^BgS. „. 

the specification of which (check one) 

X is attached hereto, 

was filed on 

as Application Serial No. 

and was amended on 

(if applioa]?le} 

I hereby state that l have reviewed and understand the contents of the above 
identified specification, including the claims, as amended by any amendment 
referred to above. 

I acknowledge the duty to disclose iniiormation which is material to the 
patentability Of this application in accoifdance with Title 37, Code of Federal 
Regulations^ §i.SC. 

I hereby claim foreign priority bene;Eits U5.de5 Title 35, Vnited states Code, §119 
of any foreign application (s) for patent cr inventor's certificate listed below 
and have also identified below any foreigr, application for patent or inventor's 
certificate having a filing date before that of the application on which 
priority is claimed: 

Prior Foreign Application (s) : Priority Claimed 

Yes No 

(Number) (Country) (Day/Month/Yoar) 



X hereby claim the benefit under Title 35 * United States Code, §120 of any United 
States application (8) listed below and, insofar as the subject mstter of each of 
the claims of this application ia not disclosed in the prior United States 
application in the maimer provided by thes first paragraph of Title tSaited 
States Code. §112, I acknowledge the duty to disclose information material to 
the patentability of this application as defined in Title 37, code of Federal 
Regulations, SI. 56 which occurred between the filing date of the prior 
application and the xiati^raal or PCT international filing date of this 
application: 



(implication Serial #} (Filing Date) (Status) 



Page 1 of 3 



NOU 22 'S9 16: 0B 



512 343 6002 PPlCE.04 



DOCKET NtJMBSR; APS9B08a9qgl 



I hereby declare that all statements made l;.ereia of my own taiowledge are true and 
chat all statetneaits made on information ar,d belief are believed to be true; and 
further that these statetneats were made vlth the knowledge that willful false 
statejoeats and the like so made are punishiible by fine or iTitprisonment, or both, 
under Section 1001 of Title 15 of the TSai"ed States Code and that sucih willful 
false statements may jeopardize the validity of the application or any patent 
issued thereon- 

POWBR OF ATTOENEVr As a named inventor, 1 Ixereby appoint the following attorneys 
and/ox agents to prosecute this applicat;lon and transact all business in the 
Patent and Tradetnark Office connected the:rewith. 

John Hendersotn, Jr., Reg. no, 2^,907? Thomas Tyson, Reg, No- 28,543; RcAiert 
caroflell, Reg. No, 28,499; Jeffrey S. LaBav, Reg. no. 31^633; Douglas H. 
Lefever Reg, Wo, 26,193; Casimer K, Salys, Reg- ETo, 2$, 900; David A* Kims, Jr., 
Reg, No. 32,708; Volel Smile, Reg. No, 39, $69; ilaTnes H- Barkadale, Jr. Reg. Mo. 
24,091; Anthony V. Sngland, Reg, No. 35,;l29; Leslie A, Van X^eeuwen, Reg. No, 
42,196; Marilyn S. oawkins^ Reg, No. 31,140; Mark B, McBumey, Reg. No. 33,114; 
Christopher A. Hughes, Reg. No. 2«,bi4; Edwasd A. Pennington, Reg. No. 32,SSa; 
John E- Hoel, Reg. No, 26,279; Jos^ C, Iledcaond, j^jc, , Reg. No. 18,753? Andrew 
J. Dillon, Reg. No. 29,^34; Max Ciccarelli, Reg. Ho- 39,454; Daniel Venglarik, 
Iteg. No. 39,409; Jack Musgrove, Reg, No. 31,^86; Brian Russell, Reg, No. 
40,796; Steven Idn, Reg. Mo. 35,250; Matthew W. Baoa, Reg* No, 42#277; OTustin M. 
Dillon, Reg. No, 42,4B6; Antony P. Kg, Reg. No. 43,427; John G, Graham, Reg. No* 
19,563; Matthew S. Anderson, Reg* No, 39,0!>3; Michael R, Barre^ Reg. No. 44,023; 
Andrew Mitchell Harris, Reg. No. 42,638; Richard McCain, Reg. No. 43^785 and 
Michael Noe, Reg, No, 44,975. 

Send correspondence to: Andrew j. Dillon, PHLSMAN, BRADliBY, VADEN, OTNTER & 
D2U^, MiP, Suite 350 Lakewood on the Park,. 7500B North Capital of Texas 
Highway, Austin, Texas 787J1, wmd direct: all telephone calls to Andrew J. Dillon/ 
(512) 343-61l€, 

FUUi NMIB OP SOLE OR FIRST INVENTOR; Vikt:ors Beretis 

INVENTORS aicaaAmRBi PAts : 



RESIDENCE: 5104 Caesta Verda 

Austin, Teoeaa 76746 

CITIZENSHIP: IT.S.A, 

POST OFFICE ADDRESS? 5104 Guesta Verde 

Austin. Texas 767^$ 



FULL NAME O? SECOND INVENTORY George yillsirdAran Leeuwen 

INVENTORS StSNATDRE /lx-JgAjE^^ AJpV^^Ur 21 f ^^^ 



RESIDENCE: 2737 59 Ch Street MW 

Rochester^_Minnesota 5S901 

CITXZENSHIS: U.S.A. 



post OFFICE ADDRESS; 2737 59th Street NW 

Roehaster, Mirmeaota_5590^ 



Page 2 of 3 



NOU 22 '99 16? 08 



512 343 S002 Pft£SE.05 



DOCKET N0MB5R; AtrSgSOSSSOSl 
FULL NAME OP Tflll® St:ev&n Michael Prt^ko 

UsTVBNTORS SIGNATOREi 



RES IDENCE J 5 (ScTfr&rn&^T^-Ls^ 

Endicott. Key York 13760 

CITI2EWSHXP: g.S,A. 



POST OWlCS ADDRESS; 5 Govemeura Lane 

EtidicQtt.^ew York 13760 



FULL NAME OP FOURTH IKVENTOE: J^pal aTnm^ri _shab^^e3^ 

Ii7V:SOT0RS SIO^TURSs BATE: 

RESIDENCE: 6S fit, Stephens SchiOoX Rca>a 
Auatin. Texas 78746 

CITIZENSHIP: ty.S.A. 



POST OFFICE ADDRESS; ge_Si:_^Sj;jSPhens School Road 

Atiacin, Texas 76746 
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DOCKET NUMJ3ER: MJ599Q599US1 
DSCIARATIOK ftKD POWER OP ATTOKRZZ FOR 
MTKKT A^PLXCATION 



As a below named inventor, I hereby declare that: 

My residence, po^t office address and citiisenship are as stated belo« next 
to -my name; 

I believe I aw the original, first and sole inventor (if only one name is 
listed below) or an original, first and joint inventor (if plural names are 
listed below) of the subject matter which is claimed and for which a patent is 
sought on the invention entitled 

M5THQD SC^ ^YSTgM FOR VERIFYIMG CQNTaOL JtfTCSSSSS BETWEEN A DEVICE ON A NON- 
PRQPRIBTARy BUS AKD A DSVICE ON A PROPRIETARY BtJS 

the specificaticm of which (checJc one) 

X is attached hereto. 

, was filed oa . 

as ApiJlication Serial l^o. 

and vas amended on . 

(if applicable) 

X hereby state that I have reviewed and 'understand the contents of the above 
identified specification , including the claims, as amended by any aitendment 
referred to above. 

I acknowledge the duty to disclose information which is material to the 
patentability of this application in accordance with Title 37, Code of Federal 
Regulations, Si. 5^, 

I hereby claim foreign priority benefits under Title 35, united states Code, Slis 
of any foreign application (s) for patent or inventor's certificate listed below 
and have also identified below any foreign application for patent or inventor's 
certificate having a filing date before that of the application on which 
priority is claimed: 

Prior Foreign Application (s) : Priority Claimed 

^....^ >^ NO 

(Nuirtber) (Conntry) (Day/ Konth/ Year) 



I hereby claim the benefit under Title 35, United States Code, S120 of any united 
States application (s) listed below and, insofar as the subject n^atter of each of 
the claims of this application is not disclosed in the prior United States 
application in the manner provided by the first paragraph of Tide 3S, United 
states code, 5ii2, 1 acknowledge the duty to disclose information material to 
the patentability of this application as defined in Title 37, Code of Federal 
Jlegulations, which occurred between the filing dsite of the prior 

application and the national or PCT int^irtu^tional filing date of this 
application; 

(Application Serial ' (riling Date) (Status) 
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DOCKET IIUKBER; Agg9,9-0_Sg9aS 1 

1 hweby declare that All stateirients made herein of my own knowledge are true and 
that all statements made on information and t)eJ,ief are Relieved to be true; and 
further that these statements were made with the )ciiowledge that wailful fal^e 
statements and the like so made are punishable by fine or in^priscnment, or both, 
under Section lOOl of Title 18 of the Uiiited States Code and that guoh W3.11ful 
false statements way jeopardise the validity of the applicatio:i or any patent 
issued thereon, 

POWSR CP MTORiror; h5 a named inventor, I hereby appoint the following attorneys 
and/or agents to prosecute this application and transact all business a-n the 
Patent and Tradernark Office connected therewith. 

crohnw. aenderson, Jr.. Reg, No, 26, $07; Thomas Tyson, Reg No. ^6,543; Robert 
M Carwell, Reg. Ho. 28,499; J^effrey LaBaw, Reg. No, 31, €33; oouglas H, 
Lefeve Reg, No. 26,193? Casimer K. salys, Reg, No. 28,300; Dava.d A. MimS/ Jr., 
Recr NO. 32,708; volel Bmile, Reg. ITo- t5,9€^; James Sarksdale, Jr. Reg, No. 
24:091? Anthony V, England, Reg. No, 35,12^; Leslie A. van Leeuwen R^^- ^o. 
42 196; Marilyn 5. Dawkinsi, Reg, No. 31,140; Mark E. MaBumey, Reg, No, 33,il4; 
Christopher A, Hughes. Reg. Ko, 26,914? Edward A. Penningt<in, Reg. No, 32,^09; 
jote E^Hoel, Reg No: 26,279, Joseph Red^nd. Jr., Reg. No IS, 753; Andrew 
J. Dillon. Reg. No. 29,f34; wax Ciccarelli, Reg- Wo. 3$, 454; Daniel E, Venglarxk, 
Reg. NO, 39,409; Jack V, Musgrove, ^eg. JJo, 3i.$e€; Brian F. Russell, Reg, ^?o- 
40 Steven I.in, Reg. No. 35,250; Matthew W. Baca, Reg. No, 42,277; Justin M. 

Dillon Reg, l^o, 42,4S6? Antony P- Ng, Reg. ^o. 43,427; John G. Grahaw, ^ff- 
19 5^3; Matthew S. Anderson, Reg, No, 39,093; Michael R. Barre, Reg. no, 44,033? 
Andrew' Mitchell Karris, Reg, No. 42,€3S; Richard McCain, Reg, No. 43,785 and 
Michael Woe, Reg- No. 44.975, 

send correspondence to: Andrew J. Dillon, FBL5MAN, BRADLEY, VAr)^aT HOTTER & 
DILLON, IJL^, Suite 350 Lakewood on the Park, 760 OB North Capital of Texas 
Highwav, Austin, Texas 78731, and direct all telephone calls to Andrew J . Dillon, 
{S^2) 3^3-6116. 

FULL NAME OF SOLB OR FIRST INVSNTORt Victors Berstis 

INVENTORS SIGNATORY-- DATE 3 

RESIDENCE: 5104 Cuesta Verde 

Anstl|n. Tex as 75746 

CITIZENSHIP: g ,S,A, 

POST o?rxcs ADDRESS: 5104 cuesta, Verde. 

Austin. Texas 78746 
FULL NAJlB OF SECOND iNVBtTTOR: George Willard Van Loeuwen 

INVENTORS S lONATORS i D^TE : ^ 

RESIDENCE : 2737 S9th Street NW 

Rochester, Minnesota 559Q1 

CITIZENSHIP : SLI^Aj 



POST OFFICE ADDRESS: 2737 59th Street 

Rochester. Minnesota 55901 
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POCKET NUMBER: AU5^909a9USl 
FtJLL JTAME OF THIRD XlTVg^OR : Steven Mi^ha^l Pritko 



RESIDENCE: S Governeurs Lape 

EndiQott. trew York; 13760 



POST OFFICE ADDRESS: 5 Governeura_Laiie 

Endicott. 2Tew York 3.37$o 



FlXLL NiRMB OP POtmTST I»VBOTOR; Aanal J^limed Shaheea 

TKVBNTOKS SXGNATDRE: DATE:, 

RESIDSNCB : 68 St, St6Dhena School Road 

CITIZENSHIP: a.S.A> 



POST OFFICE ADDRESS! €8 St. Stephens School Road 

Austin, Texafi 78745 
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DOCKET NOWBER: AUSflgoae^PSl 
DSetJAAtZON PSD FOVSR 07 ATTOSWKY FQR 

As a below named inventor « Z herdby declare that: 

My residence, post office address and cltlarendhip are as stated belov next 
kD Tny name; 

I believe I am the original^ first and sole inventor (if only one name is 
listed below) or an original ^ first and joint inventor (if plural names are 
listed belov) of the subject natter which is claimed and for which a patent is 
sought on the invention entitled 

METHOD Am SYSTEM PQft VSRIFYIKG CONTROI, ACCESSSS BETWEEN A PfiVlCE Q» A NQH- 
PTOPRIETARY BUS AND A PgVlCE OK A PROPRIETARY BPS 

the specification of which (check one) 

K_ is attached hereto. 

was filed on 

as Application Serial wo* 



and was amended on 



(if applicable) 



1 hereby state that % have reviewed and undetfltand the contents of the above 
identified specification^ inoliMling the claims ^ as amended anv amendment 
referred to above, 

1 adooowledge the ducy to disclose information which is material to the 
patentability of this application in accordance with Title 57, code of Federal 
Regulations^ §1.$6< 

I hereby claim foreign priority benefits under Title 35, TJfeited States Code^ S119 
of any foreign application (s) for patent or inventor's certificate listed below 
and have also identified below any foreign application for patent or inventor's 
certificate having a filing date before that of the application on which 
priority is claimed 2 

Prior Foreign Application (s J ; Priority Claimed 

— — -^—.pp.,,..^ Yes Ko 

(Member) (country) (Day/MontH/Vear) 

I hereby claim the benefit under Title 35, TXnited states Code, §120 of any united 
States application (s) listed below and, insofar as the subject matter of each of 
the claims of this- application is not disclosed in the prior United States 
application in the manner provided by the first paragraph of Title 35, United 
States code^ Sii2, I acknowledge the duty to disclose information material to 
the patentability of this application as defined in Title 37, code of Federal 
Regulation?:, 51* B6 which occurred between the filing date of the prior 
application and the national or PCT international filing date of this 
application: 



(Application Serial #) (Filing l^ate) {Stat:u:&> 
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DOCKET »UMBBR; APS9&08B3US1 

X hereby declare that all statements made herein fif my own Soiowledge are true and 
that all statemenrs made on information and belief are believed to be true; and 
further that these 9tatetnents were made with the knowledge that willful false 
statements and the like $o made are ptmi^Bhl« by fine or in^risoiitnentr or both, 
under Section lOOX o£ Title IS of the tXaited States code and that auch willtul 
false statement? inay jeopardize the validity of the application or any patent 
ies^ted thereon* 

FOWBR OF ATTORlil&Y: a n^med inventor » I hereby appoint the following attorneys 
and/or agents to prosecute this application and transact all husixresa in the 
Patent and Trademark Office conneicted therewith. 

John^. Henderson/ Jr,, Reg- «o. 2$, 90*?; Thoma& Tyson^ Reg, No- 2fl.S43; Robert 
Carwell, Heg. No, 2$^4d9; Jeffrey 5* LaBaw, Keg. N'o- 31/63:2; Douglas H. 
Lefeve, Keg. Ko, 2£,^$Z; Casimer K. SaXye, Reg. No. 28,500; David A. Miins> Jr., 
Reg. No- 3i2,iOBj Voxel £raile, Reg, No. 3d,9^d; James H* Barfcsdale, Jr. Reg. No- 
24,0$1; tethony Bngland, Reg* No, 35,129; I^eslie A. van lieeuwea, Reg. no- 
42,196; Marilyn DaWRins, Reg« No. n,140; Mark IS. MeBumey^ Reg. No. 33,114; 
Christopher A. Hughes, Reg. No, 2€,B14: Edward A- Pennington, Reg, No. 32,5BB; 
John B» Hoel, Reg. No* 26, 27^; Joseph C. Redmond, Jr., Reg, No. 18,753; Andrew 
J. Dillon, Reg. Ho. 29,«34; Max Ciecarelli, Reg, No. 3$, 454; Daniel Venglarik, 
Reg. No* 39,409; Jack V. Musgrove, Reg. No, 31,986; Brian P. RttSSell^ Keg. NO. 
40, 79$; Steven Ziin, Reg- No, 35,250; Matthew W. Baca, Reg. No- 42,277; Justin W, 
Dillon, Reg. No. 43^486; Antony P. i^s Reg. NO. 43,427; John d Graham, Reg. No. 
19,5^3; Matthews. Anderson^ Reg. No- 39/093; Michael R. Barre, Reg. No. 44,023; 
Andrew Mitchell Harris, Reg. No. 42,63fi; Richard McCain, Reg- No- 43,785 and 
Michael Noe, Reg- No. 44,975, 

Send correspondence to: Andrew j, Dillon, FELSMAN^ BRACm, VADHN, gunter s 
DILLON, iiiiP^ Suite 350 LaJcewood on the Park, 7600S North Capital of Texas 
Highway, Austin, texas 78731, and direct all telephone calls to Andrew J, Dillon, 

(512) 343-611$, 



EmiL NAME OF SOIiB OR PIRSX INVENTOR: Viktors Berstis 

INVIWTORS SIGNATOREi DATS: 

RESIDENCE: Sl04 Cuesta Verde 
Austin. Texas 

CITIZENSHIP ; U,S.A. 

POST OFFICE ADDRESS i 5104 Cues ta_ Verde 

AuAtia. Texafl 78746 



FULL NAME OF S2C0ND INVENTOR: fleorae Willard Van Laeuven 

INVENTORS SI^IATURE:, DATBi_ 

RESIDENCE; ^757 59th Street Hff 

Rochester r Vl'^v^'^^'^^^ g????, 

CXXrZENSHI?: T7,S.A, 

POST OFFICE ADOTESS: 27J37 59th Street m 

Roehefifcer- Minnesota 55901 
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DOCKET KlTKBBH: AUS990SB9U61 
FULL OTMS OP THIRD XKVBNTOR: Steven Michael l^rirko 

RESIDENCES 5 Governeurs Lane 

Endieott. Y6rfc 137^q 

CXTI2BMSSIPT U.S.ft, 

POST OFPXCB ADDRESS} 5 Govempurs Lane 

Rfldicott, Maw ygirk 137g6 

FULL OF FOURTH X^UVSNTOR: amal JOffltf 'f^ 

RBSIDSNCB: 68 St, Stftphms School faaad 
CITlZSWSHiPs U.S.A, 

POST OFFICE ADDRESS: jSLS St- St«j!^na SchoQl Rgad 

Augtln, Toxaa 7B74g 
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